Mandriva Update for mysql MDVA-2010:146 (mysql)

Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVA-2010:146 mysql Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

quagga -- two DoS vulnerabilities

Quagga developers report: Quagga 0.99.18 has been released. This release fixes 2 denial of services in bgpd, which can be remotely triggered by malformed AS-Pathlimit or Extended-Community attributes. These issues have been assigned CVE-2010-1674 and CVE-2010-1675. Support for AS-Pathlimit has be...

Mandriva Update for php-timezonedb MDVA-2010:139 (php-timezonedb)

Check for the Version of php-timezonedb OpenVAS Vulnerability Test Mandriva Update for php-timezonedb MDVA-2010:139 php-timezonedb Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for openssl MDVSA-2010:076-1 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076-1 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2010:084)

Multiple Java OpenJDK security vulnerabilities has been identified and fixed : - TLS: MITM attacks via session renegotiation CVE-2009-3555. - Loader-constraint table allows arrays instead of only the b ase-classes CVE-2010-0082. - Policy/PolicyFile leak dynamic ProtectionDomains. CVE-2010-0084. -...

Mandriva Update for epiphany MDVA-2010:128 (epiphany)

Check for the Version of epiphany OpenVAS Vulnerability Test Mandriva Update for epiphany MDVA-2010:128 epiphany Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for mandriva-release MDVA-2010:124 (mandriva-release)

Check for the Version of mandriva-release OpenVAS Vulnerability Test Mandriva Update for mandriva-release MDVA-2010:124 mandriva-release Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for epiphany MDVA-2010:128-1 (epiphany)

Check for the Version of epiphany OpenVAS Vulnerability Test Mandriva Update for epiphany MDVA-2010:128-1 epiphany Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for mandriva-release MDVA-2010:124 (mandriva-release)

Check for the Version of mandriva-release OpenVAS Vulnerability Test Mandriva Update for mandriva-release MDVA-2010:124 mandriva-release Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Linux Security Advisory : gimp (MDVSA-2009:332-1)

A vulnerability was discovered and corrected in gimp : Integer overflow in the readchanneldata function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow CVE-2009-3909. Additionall...

MDVA-2010:131 : yelp

It was discovered that yelp stopped working correctly on Mandriva Linux with latest xulrunner. This update addresses this problem. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecat...

[ MDVSA-2010:076-1 ] openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:076-1 http://www.mandriva.com/security/ Package : openssl Date : April 19, 2010 Affected: 2009.0 Problem Description: This update fixes several security issues in openssl: - The ssl3getrecord function in...

MDVA-2010:124 : mandriva-release

The provided packages activates the Extended Maintenance Program for 2009.0. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated...

Mandriva Linux Security Advisory : clamav (MDVSA-2010:082-1)

Multiple vulnerabilities has been found and corrected in clamav : ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities CVE-2010-0098. The...

Mandriva Update for openssl MDVSA-2010:076 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Design/Logic Flaw

The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfspriv directory, which allows local users to gain privileges by modifying 1 extended attributes or 2 ACLs, as demonstrated by deleting a file under .reiserfspriv/xattrs/...

CVE-2010-1146

The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfspriv directory, which allows local users to gain privileges by modifying 1 extended attributes or 2 ACLs, as demonstrated by deleting a file under .reiserfspriv/xattrs/...

CVE-2010-1146

The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfspriv directory, which allows local users to gain privileges by modifying 1 extended attributes or 2 ACLs, as demonstrated by deleting a file under .reiserfspriv/xattrs/...

CVE-2010-1146: Undefined Security Weakness

The Linux kernel 2.6.33.2 and earlier, when a ReiserFS filesystem exists, does not restrict read or write access to the .reiserfspriv directory, which allows local users to gain privileges by modifying 1 extended attributes or 2 ACLs, as demonstrated by deleting a file under .reiserfspriv/xattrs/...

Linux Kernel 2.6.34-rc3 ReiserFS xattr Privilege Escalation

!/usr/bin/env python ''' team-edward.py Linux Kernel http://jon.oberheide.org Information: https://bugzilla.redhat.com/showbug.cgi?id=568041 The kernel allows processes to access the internal ".reiserfspriv" directory at the top of a reiserfs filesystem which is used to store xattrs. Permissions...